8b1a460fc4ed8fc9cee61d053523187188d5ee2dc2bdc49d7fdefb2fe1b50018

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 15:36

Target
2026-08-23_f3fdb6da0fb0e55682704248eb128766_icedid_njrat_stealc.exe
Size 1017KB
Sample260823-s2c5csaf62
SHA256 8b1a460fc4ed8fc9cee61d053523187188d5ee2dc2bdc49d7fdefb2fe1b50018
MD5 f3fdb6da0fb0e55682704248eb128766
SHA1 778889f5ca7b530b53b4855519b7a24e1bd9b414
SHA512 4f667b2eae7b80d23db32709072a6ab74ccc843b1d4b413390df0ecaa61a07adcbbc5924dd1f6ad737e0f441421faebfcae84e4444403e4c698689dcbce8e54d
SSDEEP 6144:Img9d9hFQohdhiYD4i/zze0mJOZRTs262x0KFxppvab+6obG8VVNqO75:RgVndd/e0mJuXoKdpCi6obG8w8
TLSH
T173252A1AA2A441A8E1A7D2388D93C935D6327C454771DACB13D4BFA73F336D05E39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\AMD\CIM\Log\SetupCD.txt	2026-08-23_f3fdb6da0fb0e55682704248eb128766_icedid_njrat_stealc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2026-08-23_f3fdb6da0fb0e55682704248eb128766_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_f3fdb6da0fb0e55682704248eb128766_icedid_njrat_stealc.exe"
1⤵
- Drops file in Program Files directory
PID:5080

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact